Re: Flatpak 1.18.1 fixes multiple vulnerabilities

[Simon McVittie <smcv () debian org>]

On Tue, 22 Sep 2026 at 22:48:19 +0100, Simon McVittie wrote:
> On Tue, 11 Aug 2026 at 17:38:45 +0100, Simon McVittie wrote:
> > * Fix local root privilege escalation via revokefs symlink path traversal and
> > commit tampering   (https://github.com/flatpak/flatpak/security/advisories/GHSA-qrwq-7qwx-q9rp,
> > thanks to Ee Yang)

CVE-2026-96808 was allocated for GHSA-qrwq-7qwx-q9rp.

> > * Fix fixed-filename writes to arbitrary locations via symlink attack on .ld.so
> > (https://github.com/flatpak/flatpak/security/advisories/GHSA-99wv-m8rp-g58x,
> > thanks to Sebastian Wick)

CVE-2026-96807 was allocated for GHSA-99wv-m8rp-g58x.

(Thanks to MITRE CNA-LR for these)